Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

CVE-2024-49076

Summary

The vulnerability pertains to Windows Virtualization-Based Security (VBS), specifically an enclave elevation of privilege issue that could potentially allow an attacker to execute arbitrary code in a privileged context. Exploiting this vulnerability may enable a malicious actor to gain elevated permissions, potentially leading to unauthorized access and the ability to manipulate sensitive data or system functions. It is imperative for organizations using affected versions of Windows Server and Windows 10 or 11 to apply patches and mitigations as recommended by Microsoft to safeguard against potential exploitation.

References